CVE-2020-11582
First published: Mon Apr 06 2020(Updated: )
An issue was discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06. The applet in tncc.jar, executed on macOS, Linux, and Solaris clients when a Host Checker policy is enforced, launches a TCP server that accepts local connections on a random port. This can be reached by local HTTP clients, because up to 25 invalid lines are ignored, and because DNS rebinding can occur. (This server accepts, for example, a setcookie command that might be relevant to CVE-2020-11581 exploitation.)
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Pulsesecure Pulse Connect Secure | <=2020-04-06 | |
| Apple macOS | ||
| Linux Linux kernel | ||
| Oracle Solaris | ||
| Pulsesecure Pulse Policy Secure |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2020-11582?
CVE-2020-11582 is a vulnerability discovered in Pulse Secure Pulse Connect Secure (PCS) through 2020-04-06, which allows for remote code execution.
How severe is CVE-2020-11582?
CVE-2020-11582 has a severity rating of 8.8, which is considered high.
Which software is affected by CVE-2020-11582?
Pulse Secure Pulse Connect Secure (PCS) versions up to 2020-04-06 are affected by CVE-2020-11582.
How can CVE-2020-11582 be exploited?
CVE-2020-11582 can be exploited by launching a TCP server that accepts local connections on a random port when a Host Checker policy is enforced.
Is Apple macOS, Linux, and Oracle Solaris vulnerable to CVE-2020-11582?
No, Apple macOS, Linux, and Oracle Solaris are not vulnerable to CVE-2020-11582.
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/tags
- agent/description
- agent/event
- agent/type
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- vendor/pulsesecure
- canonical/pulsesecure pulse connect secure
- version/pulsesecure pulse connect secure/2020-04-06
- vendor/apple
- canonical/apple macos
- vendor/linux
- canonical/linux linux kernel
- vendor/oracle
- canonical/oracle solaris
- canonical/pulsesecure pulse policy secure